OT
Product
openSUSE Tumbleweed
4
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add openSUSE Tumbleweed to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-32190 | 7.8 | Oct 16 | mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable Affected: ? before 0.26-37.1 |
| CVE-2026-59674 | 7.1 | Jul 14 | LPE from suricata user to root due to chown in %post in suricata packaging Affected: ? before 8.0.5-2.1; ? before 8.0.5-2.1 |
| CVE-2024-49504 | 7.0 | Nov 13 | grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images Affected: ? before 2.12-28.1 |
| CVE-2026-41051 | 5.0 | May 13 | csync2 uses insecure temporary directories when compiled with C99 or later Affected: ? before 2.0+git.1600444747.83b3644-3.1 |
Showing 4